Denial of Service Vulnerability in PAN-OS Software by Palo Alto Networks
CVE-2026-0321

6.6MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Cloud Ngfw
Pan-os
Prisma Access
Vendor
CVE Published:
14 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-0321?

Palo Alto Networks PAN-OS software is susceptible to denial of service vulnerabilities that allow an unauthenticated attacker with network access to disrupt services by sending specially crafted traffic. These attacks can lead to the firewall entering maintenance mode, significantly impacting network availability. It's crucial for users to ensure they are running the latest version of PAN-OS to mitigate this risk, as products such as Cloud NGFW and Panorama are not affected.

Affected Version(s)

PAN-OS 12.2.0 < 12.2.4

PAN-OS 12.1.0 < 12.1.10-h2

PAN-OS 11.2.0 < 11.2.16

References

https://security.paloaltonetworks.com/CVE-2026-0321
vendor-advisory

CVSS V4

Score:
6.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ben Nott (internal reporter)
.